Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
File: 3230302e33312e3133382e302f32342d3234203d3e2036333036.roa (raw, json)
Hash identifier: TGkAwv2GzuI87hqprefgFk/XOPjrsDMAxVjPhdFwRfI=
Subject key identifier: 18:FA:0E:8C:48:C8:D3:D0:9D:2B:14:2E:5F:C1:95:6F:CD:E7:5D:90
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 1E97766F1F389F69AC70C8F417CAAA5812D42A97
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
Signing time: Tue 05 Mar 2024 17:41:50 +0000
ROA not before: Tue 05 Mar 2024 17:36:50 +0000
ROA not after: Tue 04 Mar 2025 17:41:50 +0000
asID: 6306
IP address blocks: 200.31.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:97:76:6f:1f:38:9f:69:ac:70:c8:f4:17:ca:aa:58:12:d4:2a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Mar 5 17:36:50 2024 GMT
Not After : Mar 4 17:41:50 2025 GMT
Subject: CN=18FA0E8C48C8D3D09D2B142E5FC1956FCDE75D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:7d:e8:a1:f9:40:a0:ae:94:91:d6:58:1d:
00:41:f0:ec:07:47:8b:a7:22:10:01:c2:a3:10:a1:
75:fe:1f:9e:3c:23:50:79:65:ef:79:47:21:05:44:
69:1f:a4:81:29:1f:37:01:58:21:8e:46:1c:b6:74:
c4:e2:4f:06:dd:b6:9c:f4:cc:e4:53:6d:18:d5:66:
90:76:80:b5:91:7d:0d:d7:7d:94:9f:ef:6f:07:d3:
ef:07:29:a3:e7:50:fd:04:bb:a0:b8:5b:13:0e:03:
b2:90:3f:e5:2a:33:2a:66:d3:09:ed:d0:24:a9:81:
8f:3a:69:46:8b:df:1d:99:7b:8d:8d:cc:86:c9:d6:
a5:0a:56:0a:9e:b7:c6:89:17:bf:3f:9a:31:12:98:
eb:1e:9c:a5:3a:ea:83:1b:a3:0f:45:98:2b:84:18:
71:37:cd:9f:c0:66:93:89:76:9a:5b:d3:ef:c1:b7:
2c:86:17:c4:22:86:db:cd:a7:93:44:bd:4e:76:19:
76:e6:dc:c3:f3:9e:ae:e8:74:36:c7:ce:d4:2e:02:
c3:88:0a:7e:ce:8f:53:56:95:8d:b5:3f:38:9a:75:
b1:0e:7a:82:fc:1b:dc:3e:a0:94:3b:9e:91:0a:81:
c1:83:a5:7d:3d:7d:c4:da:65:57:1f:f9:8c:04:a1:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:0E:8C:48:C8:D3:D0:9D:2B:14:2E:5F:C1:95:6F:CD:E7:5D:90
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e33312e3133382e302f32342d3234203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:dd:b7:23:85:43:5c:f3:4b:ac:82:ca:e0:dc:b5:3e:05:09:
f1:76:ca:d2:90:d3:a9:fa:82:a4:49:52:64:e9:31:49:a9:d7:
54:34:2d:03:ab:06:40:a4:74:95:f0:2c:e5:d1:57:5a:67:6a:
a7:f2:33:a3:75:b2:2d:00:8c:78:f4:75:d9:0d:87:f5:5e:ca:
10:06:25:b0:2d:78:d6:8b:e7:b4:4a:87:89:4c:f2:89:6c:0b:
8e:d4:5c:23:18:59:41:bf:ad:e1:31:57:4c:3e:70:5c:fd:bd:
2d:12:89:29:15:09:04:37:27:ca:94:28:02:13:78:b7:64:d9:
24:61:21:cb:a4:10:8d:e2:b4:84:0d:0c:3a:80:2f:30:27:9b:
35:bd:e6:92:96:60:00:0b:40:42:23:ef:16:c9:e9:f4:3f:9e:
07:fd:a4:46:35:35:3a:9f:e2:e9:80:9e:54:44:49:9a:25:d2:
9a:de:8f:38:1c:d2:c6:33:c8:0b:cd:c0:5f:87:d6:28:c3:05:
e9:41:bc:e7:11:4b:32:88:03:91:83:3d:9e:f0:21:1d:fa:cf:
f4:d9:89:53:49:09:ff:43:7a:51:31:0e:ab:fb:eb:fc:1e:f5:
12:dd:f0:d0:b2:6b:17:7e:92:a6:c4:58:ca:65:99:63:19:b9:
50:35:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:56:06 2025 by rpki-client